| 
5-14 D30 Line Distance Protection System GE Multilin5.2 PRODUCT SETUP 5 SETTINGS5# Role IDATTRIBUTE GE-UR-Role 1 integer# GE-UR-ROLE valuesVALUE GE-UR-Role Administrator 1VALUE GE-UR-Role Supervisor 2VALUE GE-UR-Role Engineer 3VALUE GE-UR-Role Operator 4VALUE GE-UR-Role Observer 5END-VENDOR GE#############################################################f. In the dictionary file in the \etc\raddb folder, add the following line.$INCLUDE dictionary.geFor example, the file can look like the following:$INCLUDE ../shareéfreeradius/dictionary$INCLUDE dictionary.geg. For the first start, run the RADIUS server in debug mode by entering /start_radiusd_debug.bath. Set up the RADIUS parameters on the UR as follows. Access Device > Settings > Product Setup > Security. Con-figure the IP address and ports for the RADIUS server. Leave the GE vendor ID field at the default of 2910. Update theRADIUS shared secret as specified in the clients.conf file.3. On the RADIUS server, configure the user accounts. Do not use the five pre-defined roles as user names (Administra-tor, Supervisor, Engineer, Operator, Observer) in the RADIUS server. If you do, the UR relay automatically provides theauthentication from the device.4. In the EnerVista software, choose server authentication and log in using the user name and password configured onthe RADIUS server for server authentication login.5. After making any required changes, log out using the Commands > Relay Maintenance > Security menu.For all user roles except Observer, only one instance can be logged in at one time, for both login byfront panel and software.When changing settings offline, ensure that only settings permitted by the role that performs the set-tings download are changed because only those changes are applied.Targets refer to errors display on the front panel or the Targets panel in the EnerVista software. User accounts of Adminis-trator, Engineer, and Factory Service can reset the targets using the reset key.To reset targets:1. Log in as Administrator, Engineer, and Factory Service and make the changes. To reset the security-related self-test orauthentication lockout, log in as Administrator or Supervisor and execute a clear security command under Commands> Security > Clear Security.b) MAIN MENUPATH: SETTINGS PRODUCT SETUP SECURITY SECURITYLOGIN:NoneRange: Administrator, Engineer, Supervisor,Operator, Factory (for factory use only), NoneMESSAGE CHANGE LOCAL PASSWORDS See page 5–15.NOTICENOTICE |
